Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9jVXR1jrRGob4iAlrou3E-MyBZo.roa
File: 9jVXR1jrRGob4iAlrou3E-MyBZo.roa (raw, json)
Hash identifier: EvliRuxbzBCPuUwKKVu93uCZJ79ro6lVNykCbDzK9ck=
Subject key identifier: F6:35:57:47:58:EB:44:6A:1B:E2:20:25:AE:8B:B7:13:E3:32:05:9A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019436382E7E75CC959DBB81EDA8DEAD6D8B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9jVXR1jrRGob4iAlrou3E-MyBZo.roa
Signing time: Sun 05 Jan 2025 11:27:18 +0000
ROA not before: Sun 05 Jan 2025 11:27:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215039
IP address blocks: 5.231.26.0/24 maxlen: 24
77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Feb 2025 11:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:36:38:2e:7e:75:cc:95:9d:bb:81:ed:a8:de:ad:6d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 5 11:27:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f635574758eb446a1be22025ae8bb713e332059a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3e:f6:2d:18:ce:46:04:51:3e:cc:16:da:22:
b3:47:d4:b4:cd:cf:26:93:6c:25:79:ef:8d:e3:2a:
d7:a5:2f:e5:d9:ef:6a:0f:6d:33:14:a5:32:96:ed:
ba:95:cd:da:7b:c3:69:76:42:e1:e2:f0:66:ca:09:
35:10:f4:e8:fe:43:d2:35:a7:a8:0e:a0:52:dc:66:
ec:1f:05:31:25:b9:9c:c5:3d:9b:bf:f8:b3:7c:95:
2e:86:d8:3a:1c:0d:9a:b2:d3:fc:bd:a3:a8:4e:33:
40:78:11:01:c2:05:55:1d:28:1a:93:7f:04:e6:d7:
c8:e7:40:e5:cc:8e:85:cf:c8:db:51:d5:79:73:38:
79:26:ab:84:d8:35:bf:20:56:63:52:a3:21:90:07:
4f:64:85:de:48:85:41:bf:49:65:e2:5b:66:9d:b5:
ab:18:72:23:53:ce:e2:14:84:dc:e3:5d:9b:0c:42:
48:3f:fe:c4:ac:b8:42:9c:e1:91:22:56:66:1e:a7:
53:f5:67:b8:df:b1:8b:ca:fc:5d:e7:6c:66:d0:c4:
a9:64:da:c3:27:1d:8e:ea:6b:56:51:4e:0e:2a:78:
49:89:10:52:47:44:d5:ea:92:da:b8:d8:16:90:e3:
5a:27:d1:08:00:6e:87:ba:96:5b:ee:c1:df:4a:5f:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:35:57:47:58:EB:44:6A:1B:E2:20:25:AE:8B:B7:13:E3:32:05:9A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9jVXR1jrRGob4iAlrou3E-MyBZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
77.90.5.0/24
77.90.14.0/24
77.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
17:00:9a:0a:22:6c:b4:52:25:28:30:47:28:0c:d1:9b:dd:09:
36:00:13:12:fc:ea:1a:b4:f8:3e:7c:4e:75:8e:7b:c3:c6:b7:
fa:30:8c:1a:31:08:b5:31:f2:e1:60:d8:90:14:ec:56:c0:85:
2c:c8:f9:ae:9a:cd:79:50:90:2f:b9:70:ec:cc:3e:d9:20:00:
03:6c:41:fc:c8:ef:e3:65:a7:a3:79:13:66:0a:f2:1a:0a:2b:
23:0c:38:7a:6d:e6:0d:0e:a1:8b:5b:33:ad:56:da:b4:63:54:
3b:82:23:a4:08:5b:1f:ad:ac:30:c3:ff:44:07:26:46:0c:79:
b3:14:b6:3d:82:69:8a:a6:18:85:3e:2e:f2:b2:b3:d2:3b:e3:
9d:a6:62:01:7f:89:e8:2a:9a:86:b9:eb:b8:80:fc:14:30:ce:
69:54:a4:a6:52:8b:07:20:d1:3d:00:89:86:f5:58:0b:55:3a:
35:83:30:d9:a4:f6:a8:0b:eb:86:82:75:44:ee:12:b4:01:13:
01:eb:dd:2f:e1:3c:10:8c:8f:d6:a9:72:01:60:18:c9:6a:f7:
7d:6d:d0:57:45:a1:44:b8:32:0c:18:eb:89:1e:1b:a3:4f:27:
1e:82:fd:ad:1a:fe:68:2f:d3:04:15:fc:72:cd:57:4c:9b:f4:
a9:82:4e:b1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQ2OC5+dcyVnbuB7ajerW2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTA1MTEyNzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjM1NTc0NzU4ZWI0NDZhMWJlMjIwMjVhZThiYjcxM2UzMzIwNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j72LRjORgRRPswW2iKzR9S0zc8m
k2wlee+N4yrXpS/l2e9qD20zFKUylu26lc3ae8NpdkLh4vBmygk1EPTo/kPSNaeo
DqBS3GbsHwUxJbmcxT2bv/izfJUuhtg6HA2astP8vaOoTjNAeBEBwgVVHSgak38E
5tfI50DlzI6Fz8jbUdV5czh5JquE2DW/IFZjUqMhkAdPZIXeSIVBv0ll4ltmnbWr
GHIjU87iFITc412bDEJIP/7ErLhCnOGRIlZmHqdT9We437GLyvxd52xm0MSpZNrD
Jx2O6mtWUU4OKnhJiRBSR0TV6pLauNgWkONaJ9EIAG6HupZb7sHfSl/1lwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPY1V0dY60RqG+IgJa6LtxPjMgWaMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvOWpWWFIxanJSR29iNGlBbHJvdTNFLU15QlpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABecaAwQA
TVoFAwQATVoOAwQATVo1MA0GCSqGSIb3DQEBCwUAA4IBAQAXAJoKImy0UiUoMEco
DNGb3Qk2ABMS/OoatPg+fE51jnvDxrf6MIwaMQi1MfLhYNiQFOxWwIUsyPmums15
UJAvuXDszD7ZIAADbEH8yO/jZaejeRNmCvIaCisjDDh6beYNDqGLWzOtVtq0Y1Q7
giOkCFsfrawww/9EByZGDHmzFLY9gmmKphiFPi7ysrPSO+OdpmIBf4noKpqGueu4
gPwUMM5pVKSmUosHINE9AImG9VgLVTo1gzDZpPaoC+uGgnVE7hK0ARMB690v4TwQ
jI/WqXIBYBjJavd9bdBXRaFEuDIMGOuJHhujTycegv2tGv5oL9MEFfxyzVdMm/Sp
gk6x
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:23 2025 by rpki-client